Legal
Privacy policy
Last updated 23 October 2026. This policy explains what personal data Leadplay OÜ collects through leadplay.eu, why, and what rights you have under the General Data Protection Regulation (GDPR).
1. Who we are
The data controller for this website is Leadplay OÜ, a private limited company registered in Estonia (registry code 16204555, VAT EE102382529), with its registered address at Viru väljak 2, 10111 Tallinn, Estonia. You can reach us at [email protected].
2. What data we collect and why
2.1 Contact form and email enquiries
When you contact us through the form on this site or by email, we collect the details you provide: your name, work email address, company, website, approximate advertising budget, the platforms you are interested in and the content of your message. We also record the time of the submission, your IP address and browser user agent for security and spam prevention.
Purpose: to answer your enquiry, assess whether our services are a fit and, if you ask us to, prepare a proposal.
Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR). Your consent to this policy is requested when you submit the form.
2.2 Analytics (only with your consent)
If analytics is enabled on this site, we use Google Analytics 4 to understand how visitors use the site. Analytics cookies are set only after you accept them in the cookie banner. IP addresses are anonymised and we do not use analytics data for advertising personalisation.
Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by clearing your browser storage for this site or by contacting us.
2.3 Server logs
Our hosting provider automatically records standard web-server logs (IP address, requested URL, time, referrer, user agent) to keep the site secure and available. Legal basis: our legitimate interest in the security and operation of the website (Art. 6(1)(f) GDPR).
2.4 Client and supplier records
If you become a client or supplier, we process the contact and contractual data needed to perform the agreement and meet our legal obligations, including Estonian accounting and tax law. Legal basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).
3. Cookies
This site uses only strictly necessary storage plus optional analytics cookies that require your consent. Details are in our cookie policy.
4. How long we keep data
| Data | Retention |
|---|---|
| Enquiries that do not lead to a contract | Up to 24 months from last contact |
| Client and supplier contract records | 7 years after the end of the financial year, as required by the Estonian Accounting Act |
| Analytics data | Up to 14 months (Google Analytics data retention setting) |
| Server logs | Typically 30–90 days, as set by our hosting provider |
5. Who we share data with
We do not sell personal data. We share it only with service providers who process it on our behalf under data-processing agreements:
- our web-hosting and email providers (for storing and delivering messages);
- Google Ireland Ltd (Google Analytics), only if you have accepted analytics cookies;
- professional advisers (accountants, lawyers) where necessary;
- public authorities where the law requires it.
6. International transfers
Our servers are located in the European Union. Where a provider processes data outside the EU/EEA (for example Google Analytics), transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased where there is no overriding reason to keep it;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing before withdrawal;
- lodge a complaint with a supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.
To exercise any of these rights, email [email protected]. We respond within one month.
8. Security
The site is served over HTTPS. Access to enquiry data is limited to the people who need it to respond. Form submissions are protected against automated abuse, and we do not store payment details on this site.
9. Children
This website is intended for businesses. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows the current version. Material changes will be highlighted on this page.
11. Contact
Leadplay OÜ · Viru väljak 2, 10111 Tallinn, Estonia · [email protected]